CWE-639 · Authorization Bypass Through User-Controlled Key (page 22)
Page 22 of 23 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39889 | Medium | 4.3 | 2021-10-05 | In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to… |
CVE-2021-37777 | High | 7.5 | 2021-10-04 | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowin… |
CVE-2021-37331 | Medium | 5.3 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and v… |
CVE-2021-41847 | High | 8.8 | 2021-10-01 | An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials assigned to a specifi… |
CVE-2021-41301 | Critical | 9.8 | 2021-09-30 | ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will e… |
CVE-2021-41298 | High | 8.8 | 2021-09-30 | ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied… |
CVE-2021-36874 | High | 7.1 | 2021-09-27 | Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5). |
CVE-2021-29773 | Medium | 5.4 | 2021-09-15 | IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure di… |
CVE-2021-38624 | Medium | 6.5 | 2021-09-15 | Windows Key Storage Provider Security Feature Bypass Vulnerability |
CVE-2021-40355 | High | 8.8 | 2021-09-14 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions… |
CVE-2021-37184 | Critical | 9.8 | 2021-09-14 | A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user… |
CVE-2021-33981 | Medium | 4.3 | 2021-09-08 | An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remo… |
CVE-2021-37628 | High | 7.5 | 2021-09-07 | Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares in Nextclou… |
CVE-2021-37631 | Medium | 6.5 | 2021-09-07 | Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected vers… |
CVE-2021-37630 | Medium | 6.5 | 2021-09-07 | Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user t… |
CVE-2021-36032 | High | 8.3 | 2021-09-01 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An au… |
CVE-2021-40352 | Medium | 6.5 | 2021-09-01 | OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users. |
CVE-2021-22023 | High | 7.2 | 2021-08-30 | The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Op… |
CVE-2021-24562 | High | 7.5 | 2021-08-23 | The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing… |
CVE-2021-37709 | Medium | 6.5 | 2021-08-16 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of… |
CVE-2021-37215 | Medium | 4.3 | 2021-08-09 | The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote at… |
CVE-2021-37214 | High | 8.8 | 2021-08-09 | The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attac… |
CVE-2021-37213 | Medium | 4.3 | 2021-08-09 | The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers… |
CVE-2021-37212 | Medium | 5.4 | 2021-08-09 | The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers ca… |
CVE-2021-36801 | High | 8.1 | 2021-08-04 | Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue was fixed in version… |
CVE-2021-24473 | Medium | 5.4 | 2021-08-02 | The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and ab… |
CVE-2021-32744 | Critical | 9.8 | 2021-07-21 | Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthenticated attackers are able to gain access t… |
CVE-2021-35337 | Medium | 4.3 | 2021-07-01 | Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices… |
CVE-2021-24374 | Medium | 5.3 | 2021-06-21 | The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on th… |
CVE-2021-22906 | Medium | 6.5 | 2021-06-11 | Nextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock… |
CVE-2021-31927 | Medium | 4.3 | 2021-06-10 | An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any… |
CVE-2021-31970 | Medium | 5.5 | 2021-06-08 | Windows TCP/IP Driver Security Feature Bypass Vulnerability |
CVE-2020-6641 | Medium | 4.3 | 2021-06-02 | Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain… |
CVE-2021-32654 | High | 8.1 | 2021-06-01 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read… |
CVE-2021-24318 | Medium | 6.5 | 2021-06-01 | The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authentica… |
CVE-2020-26679 | Medium | 4.3 | 2021-05-26 | vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or pr… |
CVE-2020-36126 | High | 8.1 | 2021-05-07 | Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTORE marketpl… |
CVE-2020-23722 | High | 8.8 | 2021-03-10 | An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the "id" and "fuel_id" paramete… |
CVE-2021-21324 | Medium | 6.8 | 2021-03-08 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI befo… |
CVE-2021-21255 | Medium | 5.8 | 2021-03-02 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI vers… |
CVE-2020-8297 | Medium | 4.3 | 2021-02-23 | Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access… |
CVE-2021-21022 | Medium | 5.3 | 2021-02-11 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the produc… |
CVE-2020-13462 | Medium | 5.7 | 2021-02-09 | Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA. |
CVE-2020-16194 | Medium | 5.3 | 2021-02-04 | An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's i… |
CVE-2021-26024 | Medium | 5.3 | 2021-02-03 | The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other us… |
CVE-2020-36231 | Medium | 4.3 | 2021-02-02 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure… |
CVE-2020-23449 | High | 7.5 | 2021-01-26 | newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized chang… |
CVE-2020-29446 | Medium | 5.3 | 2021-01-18 | Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in… |
CVE-2021-21013 | High | 8.1 | 2021-01-13 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the cu… |
CVE-2021-21012 | Medium | 5.3 | 2021-01-13 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the ch… |
CVE-2020-4918 | Medium | 4.4 | 2021-01-04 | IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service conso… |
CVE-2020-35849 | High | 7.5 | 2020-12-30 | An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary… |
CVE-2020-29156 | Medium | 5.3 | 2020-12-27 | The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_st… |
CVE-2020-26178 | Medium | 5.3 | 2020-12-18 | In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated. |
CVE-2020-26175 | Medium | 6.5 | 2020-12-18 | In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of… |
CVE-2020-26173 | Low | 3.1 | 2020-12-18 | An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid docume… |
CVE-2020-26171 | Medium | 4.3 | 2020-12-18 | In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users ca… |
CVE-2020-20183 | High | 7.5 | 2020-12-14 | Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and a… |
CVE-2020-13357 | Medium | 4.3 | 2020-12-11 | An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user… |
CVE-2020-27663 | Medium | 4.3 | 2020-11-26 | In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any item… |
CVE-2020-27662 | Medium | 4.3 | 2020-11-26 | In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database tab… |
CVE-2020-26068 | Medium | 5.5 | 2020-11-18 | A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an ac… |
CVE-2020-27742 | Medium | 6.5 | 2020-10-28 | An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg… |
CVE-2020-8235 | Medium | 4.3 | 2020-10-05 | Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments. |
CVE-2020-16240 | Medium | 5.3 | 2020-09-23 | GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScrip… |
CVE-2020-23446 | Medium | 5.3 | 2020-09-22 | Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API |
CVE-2020-15958 | High | 8.6 | 2020-09-18 | An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various… |
CVE-2020-12643 | Medium | 4.3 | 2020-08-31 | OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address. |
CVE-2020-19890 | Medium | 4.9 | 2020-08-24 | DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter function for security… |
CVE-2020-10779 | Medium | 6.5 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. There… |
CVE-2020-13923 | Medium | 5.3 | 2020-07-15 | IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04 |
CVE-2020-14174 | Medium | 4.3 | 2020-07-13 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References… |
CVE-2019-15310 | Critical | 9.8 | 2020-07-01 | An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attacker could retrieve t… |
CVE-2020-13700 | High | 7.5 | 2020-06-24 | An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, a… |
CVE-2020-13998 | Medium | 5.3 | 2020-06-11 | Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page o… |
CVE-2020-8154 | High | 7.7 | 2020-05-12 | An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious… |
CVE-2020-5743 | Medium | 4.3 | 2020-05-07 | Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission. |
CVE-2020-8791 | Medium | 6.5 | 2020-05-04 | The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unau… |
CVE-2020-11009 | Medium | 6.5 | 2020-04-29 | In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to s… |
CVE-2020-11659 | Medium | 4.3 | 2020-04-15 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action. |
CVE-2020-11658 | Critical | 9.8 | 2020-04-15 | CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization. |
CVE-2020-9384 | High | 8.8 | 2020-04-14 | An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users… |
CVE-2020-11589 | High | 7.5 | 2020-04-06 | An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make a GET request to a cer… |
CVE-2020-11585 | Medium | 4.3 | 2020-04-06 | There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A register… |
CVE-2020-7918 | Medium | 5.4 | 2020-03-27 | An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other use… |
CVE-2020-9468 | Medium | 4.3 | 2020-03-26 | The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the… |
CVE-2019-18626 | Medium | 4.3 | 2020-03-25 | Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/… |
CVE-2019-19946 | Medium | 6.5 | 2020-03-16 | The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team. |
CVE-2020-5539 | Medium | 6.5 | 2020-03-02 | GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary use… |
CVE-2019-19866 | High | 7.5 | 2020-02-21 | Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By i… |
CVE-2019-18998 | High | 7.1 | 2020-02-17 | Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full acce… |
CVE-2020-8503 | Medium | 6.5 | 2020-01-31 | Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated se… |
CVE-2019-5466 | Medium | 4.3 | 2020-01-28 | An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names. |
CVE-2019-15582 | Medium | 5.3 | 2020-01-28 | An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any… |
CVE-2019-15581 | Medium | 5.3 | 2020-01-28 | An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to… |
CVE-2020-5194 | Medium | 5.4 | 2020-01-14 | The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endp… |
CVE-2019-20209 | High | 7.5 | 2020-01-13 | The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-a… |
CVE-2020-6859 | Medium | 5.3 | 2020-01-13 | Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remo… |
CVE-2019-19259 | Medium | 4.3 | 2020-01-03 | GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR). |
CVE-2019-15913 | Critical | 9.8 | 2019-12-20 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, cau… |